$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa File: 1351a206-7659-3d84-bdf1-3748c7102b44.roa (raw, json) Hash identifier: T4jRMYcCfxIu1QYbd60RTpnPQVb89QAhv/ktwt+e/Fg= Subject key identifier: D9:22:FE:D8:6B:92:D6:6A:81:1A:08:FB:AD:1D:B9:B6:A3:6D:20:B7 Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584B1AD187D05F6623B56E5ECC80 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 40788 IP address blocks: 24.54.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:87:d0:5f:66:23:b5:6e:5e:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=dce0e2e6-5dbb-477d-aadd-8389d5f26d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:80:65:a7:fb:20:19:21:57:7f:01:00:11:be: 54:96:4e:02:44:39:c6:0c:0b:bd:cd:0a:1c:68:2a: c8:3a:a0:8e:ed:1e:85:35:bf:6c:69:ef:8f:82:3c: 0e:6f:dd:88:df:45:56:1c:07:61:ad:0e:98:87:b8: 93:63:f8:85:31:99:e2:04:4c:e1:d1:29:45:65:87: ec:ae:1f:15:9b:06:ba:51:70:21:43:56:b8:90:7d: 21:99:20:c7:39:d4:77:ff:50:55:04:53:9a:78:88: 0b:6e:90:4d:b2:b4:9a:fb:fa:55:26:77:b3:81:19: 84:01:be:dd:da:85:05:93:cc:fa:da:d9:8b:be:1d: bd:e1:7c:6c:e0:fb:41:98:de:f0:ab:94:f0:c4:d4: f1:7b:c6:2c:4b:82:e8:72:3f:16:bf:04:db:d6:dc: 89:bb:70:ed:63:e2:68:d9:a1:64:09:7e:3b:0c:0d: a2:9f:19:dd:06:7e:9f:e1:51:7a:36:d3:2c:61:a2: 1d:b7:46:4e:a2:12:2a:05:b3:49:f8:c7:a0:7c:e6: 6d:93:ba:44:f5:2f:8d:8a:88:d0:91:12:8a:e7:a7: cb:74:7c:73:8b:09:9f:8a:79:d4:bb:2b:4d:59:c7: 65:ec:59:f3:7a:43:b7:6b:71:af:03:54:db:27:0a: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:FE:D8:6B:92:D6:6A:81:1A:08:FB:AD:1D:B9:B6:A3:6D:20:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1351a206-7659-3d84-bdf1-3748c7102b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 24.54.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:d7:ae:4e:f0:d9:0f:6a:ca:6a:7e:68:ce:71:5f:9c:38:c7: 90:84:d0:aa:63:c8:39:ea:8e:3a:17:cf:2f:48:50:f9:94:dd: 56:81:55:3f:04:86:75:54:34:fb:58:f8:c7:8b:2c:a4:69:08: 53:83:b8:bd:28:54:63:f0:57:5f:12:99:3e:ad:0a:91:7d:90: a2:18:32:d8:60:84:7c:96:e3:9f:c8:93:15:85:1b:91:de:1a: 61:49:f3:42:2a:9e:28:a2:02:2b:45:2b:f2:60:de:9c:e4:32: bd:0d:35:df:f6:6c:85:60:ba:57:9d:b4:37:7e:e2:17:5f:34: d7:10:be:e0:5b:e8:5d:19:50:bd:aa:3f:e2:f1:5a:53:8d:fc: 9f:1b:2c:e2:c3:0f:e6:10:07:a6:2a:b9:dc:7e:9c:9e:b7:55: 35:c9:05:aa:6b:dd:f1:d8:d1:43:fb:75:72:75:e6:f5:61:a6: 49:fe:f4:7f:da:54:c0:ed:41:c9:a3:d4:09:1b:1d:43:5c:7c: a8:a3:51:46:25:62:69:5d:1b:41:51:b5:bf:c4:f7:91:ba:9e: 72:99:1b:ff:d3:98:44:d2:1f:c7:28:21:6d:b9:1e:42:c5:0e: 97:10:24:f0:94:be:db:e4:48:77:17:81:53:63:a3:fc:4b:eb: 26:b2:f2:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0YfQX2YjtW5ezIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk ZGNlMGUyZTYtNWRiYi00NzdkLWFhZGQtODM4OWQ1ZjI2ZDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoBlp/sgGSFXfwEAEb5Ulk4CRDnGDAu9zQoc aCrIOqCO7R6FNb9sae+PgjwOb92I30VWHAdhrQ6Yh7iTY/iFMZniBEzh0SlFZYfs rh8Vmwa6UXAhQ1a4kH0hmSDHOdR3/1BVBFOaeIgLbpBNsrSa+/pVJnezgRmEAb7d 2oUFk8z62tmLvh294Xxs4PtBmN7wq5TwxNTxe8YsS4Locj8WvwTb1tyJu3DtY+Jo 2aFkCX47DA2inxndBn6f4VF6NtMsYaIdt0ZOohIqBbNJ+MegfOZtk7pE9S+NiojQ kRKK56fLdHxziwmfinnUuytNWcdl7FnzekO3a3GvA1TbJwraUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNki/thrktZqgRoI+60dubajbSC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMTM1MWEyMDYtNzY1OS0z ZDg0LWJkZjEtMzc0OGM3MTAyYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGDZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3Xrk7w2Q9qymp+aM5xX5w4x5CE0KpjyDnqjjoXzy9IUPmU3VaBVT8E hnVUNPtY+MeLLKRpCFODuL0oVGPwV18SmT6tCpF9kKIYMthghHyW45/IkxWFG5He GmFJ80IqniiiAitFK/Jg3pzkMr0NNd/2bIVguledtDd+4hdfNNcQvuBb6F0ZUL2q P+LxWlON/J8bLOLDD+YQB6Yqudx+nJ63VTXJBapr3fHY0UP7dXJ15vVhpkn+9H/a VMDtQcmj1AkbHUNcfKijUUYlYmldG0FRtb/E95G6nnKZG//TmETSH8coIW25HkLF DpcQJPCUvtvkSHcXgVNjo/xL6yay8g0= -----END CERTIFICATE-----Generated at Fri Oct 10 17:33:25 2025 by rpki-client